CVE-2023-42576

Summary

CVE-2023-42576 is an authentication vulnerability affecting Samsung Pass prior to version 4.3.00.17. This issue allows physical attackers to bypass the authentication process due to an invalid exception handler. The vulnerability arises from improper authentication checks, enabling unauthorized access to devices linked to the Samsung Pass application. Attackers can exploit this weakness to gain access to sensitive information or perform unauthorized actions on compromised devices. Users are advised to update their Samsung Pass application to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.